{"id":"CVE-2017-9436","details":"TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.","aliases":["GHSA-cm26-gp8j-w6xf"],"modified":"2026-07-08T05:51:51.187408632Z","published":"2017-06-05T14:29:00.700Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"2.1.20.0"},{"last_affected":"2.1.20.0"},{"introduced":"2.1.22.0"},{"last_affected":"2.1.22.0"}],"source":"CPE_STRING","vendor_product":"teampass:teampass","cpes":["cpe:2.3:a:teampass:teampass:2.1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.22.0:*:*:*:*:*:*:*"]}]},"references":[{"type":"FIX","url":"https://github.com/nilsteampassnet/TeamPass/blob/master/changelog.md"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/nilsteampassnet/teampass","events":[{"introduced":"82031ba660c0b96f9a89b490c5764e678827953b"},{"last_affected":"68ace1b112e7aa676f7aa837373d365ed1d94a5c"}],"database_specific":{"extracted_events":[{"introduced":"2.1.23.1"},{"last_affected":"2.1.23.1"},{"introduced":"2.1.23.2"},{"last_affected":"2.1.23.2"},{"introduced":"2.1.23.3"},{"last_affected":"2.1.23.3"},{"introduced":"2.1.23.4"},{"last_affected":"2.1.23.4"},{"introduced":"2.1.24.0"},{"last_affected":"2.1.24.0"},{"introduced":"2.1.24.1"},{"last_affected":"2.1.24.1"},{"introduced":"2.1.24.2"},{"last_affected":"2.1.24.2"},{"introduced":"2.1.24.3"},{"last_affected":"2.1.24.3"},{"introduced":"2.1.24.4"},{"last_affected":"2.1.24.4"},{"introduced":"2.1.25.0"},{"last_affected":"2.1.25.0"},{"introduced":"2.1.25.1"},{"last_affected":"2.1.25.1"},{"introduced":"2.1.25.2"},{"last_affected":"2.1.25.2"},{"introduced":"2.1.26"},{"last_affected":"2.1.26"},{"introduced":"2.1.26.0"},{"last_affected":"2.1.26.0"},{"introduced":"2.1.26.1"},{"last_affected":"2.1.26.1"},{"introduced":"2.1.26.2"},{"last_affected":"2.1.26.2"},{"introduced":"2.1.26.3"},{"last_affected":"2.1.26.3"},{"introduced":"2.1.26.4"},{"last_affected":"2.1.26.4"},{"introduced":"2.1.26.5"},{"last_affected":"2.1.26.5"},{"introduced":"2.1.26.6"},{"last_affected":"2.1.26.6"},{"introduced":"2.1.26.7"},{"last_affected":"2.1.26.7"},{"introduced":"2.1.26.8"},{"last_affected":"2.1.26.8"},{"introduced":"2.1.26.9"},{"last_affected":"2.1.26.9"},{"introduced":"2.1.26.10"},{"last_affected":"2.1.26.10"},{"introduced":"2.1.26.11"},{"last_affected":"2.1.26.11"},{"introduced":"2.1.26.12"},{"last_affected":"2.1.26.12"},{"introduced":"2.1.26.13"},{"last_affected":"2.1.26.13"},{"introduced":"2.1.26.14"},{"last_affected":"2.1.26.14"},{"introduced":"2.1.26.15"},{"last_affected":"2.1.26.15"},{"introduced":"2.1.26.16"},{"last_affected":"2.1.26.16"},{"introduced":"2.1.26.17"},{"last_affected":"2.1.26.17"},{"introduced":"2.1.26.18"},{"last_affected":"2.1.26.18"},{"introduced":"2.1.26.19"},{"last_affected":"2.1.26.19"},{"introduced":"2.1.27.0"},{"last_affected":"2.1.27.0"},{"introduced":"2.1.27.1"},{"last_affected":"2.1.27.1"},{"introduced":"2.1.27.2"},{"last_affected":"2.1.27.2"},{"introduced":"2.1.27.3"},{"last_affected":"2.1.27.3"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:teampass:teampass:2.1.23.1:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.23.2:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.23.3:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.23.4:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.24.0:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.24.1:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.24.2:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.24.3:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.24.4:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.25.0:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.25.1:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.25.2:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.1:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.2:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.3:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.4:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.5:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.6:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.7:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.8:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.9:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.10:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.11:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.12:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.13:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.14:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.15:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.16:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.17:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.18:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.26.19:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.27.0:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.27.1:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.27.2:*:*:*:*:*:*:*","cpe:2.3:a:teampass:teampass:2.1.27.3:*:*:*:*:*:*:*"]}}],"versions":["2.1.23.1","2.1.23.2","2.1.23.4","2.1.24.0","2.1.24.1","2.1.24.2","2.1.24.3","2.1.24.4","2.1.25.0","2.1.25.1","2.1.25.2","2.1.26","2.1.26.0","2.1.26.1","2.1.26.10","2.1.26.11","2.1.26.13","2.1.26.14","2.1.26.15","2.1.26.16","2.1.26.17","2.1.26.18","2.1.26.19","2.1.26.2","2.1.26.3","2.1.26.4","2.1.26.5","2.1.26.6","2.1.26.7","2.1.26.8","2.1.26.9","2.1.27.0","2.1.27.1","2.1.27.2","2.1.27.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9436.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}